Since legitimate senders usually use relevant subject lines, missing or incorrect subject lines are a clear indication of phishing. Another characteristic is a discrepancy between the subject and the content. Phishing attempts also often use alarming subject lines.

Emails sent at unusual times, such as in the middle of the night or on public holidays, should be treated with caution. Phishing scammers send their messages automatically and without regard to normal business hours.

Fraudulent emails often contain file attachments with malicious software or links to fraudulent websites. For example, unexpected attachments, files with duplicate file extensions such as ".pdf.exe" or those with generic names such as "Document1.zip" are suspicious.

Many phishing emails contain noticeable typos, strange sentence structures, unusual formulations or an inconsistent language style, as they are often translated automatically or written by non-native speakers. A professional organization would usually correct such errors before dispatch.

Scammers often use offers that seem too good to be true, promising high profits or exclusive benefits. If an offer seems too good to be true, or if there is no clear justification for the special treatment, treat the email with skepticism.

Scammers like to use mysterious or vague phrases in the subject line and message, such as "You won't believe what happened! Such techniques aim to exploit people's natural curiosity.

Building up pressure in an email can be a clear sign of phishing. Scammers often use language that suggests a sense of urgency or imminent consequences. This is intended to entice the recipient to act hastily without critically reviewing the email.